This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5FgXL5cEkGGNZZtzdavvWABRlkw.roa File: 5FgXL5cEkGGNZZtzdavvWABRlkw.roa (raw, json) Hash identifier: c9jcQFBkVZY9hKqBayeI9JOHxEB+q7LmNJ4UAMLxnCo= Subject key identifier: E4:58:17:2F:97:04:90:61:8D:65:9B:73:75:AB:EF:58:00:51:96:4C Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E3935F4A35D1D8314BAB4C7AB5F6E6F Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5FgXL5cEkGGNZZtzdavvWABRlkw.roa Signing time: Fri 02 Jan 2026 10:20:37 +0000 ROA not before: Fri 02 Jan 2026 10:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203669 IP address blocks: 2a0c:b641:800::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:35:f4:a3:5d:1d:83:14:ba:b4:c7:ab:5f:6e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e458172f970490618d659b7375abef580051964c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:be:ca:d6:10:2b:42:15:48:df:f3:4e:4b:0b: c8:f7:1a:68:84:15:b2:53:91:04:d7:a2:cf:3a:29: 6b:ea:ac:55:59:13:ab:78:f4:07:2a:28:41:71:48: 04:fb:27:46:aa:e4:5f:89:1f:56:27:cf:ef:ba:d5: f4:67:75:c9:29:20:de:aa:49:b3:de:4d:5f:e4:90: 7f:34:dc:36:e2:b6:39:ca:39:09:54:ef:48:ef:72: 10:74:8b:a2:19:9e:f8:21:67:87:73:23:63:3c:ef: f4:fb:aa:48:ca:c3:47:c3:3b:21:51:1c:10:c7:c9: d8:90:4a:28:cf:76:4e:15:d5:27:1d:6c:a3:3a:56: ba:4d:e1:8f:9c:91:cd:a0:2f:e7:d7:a2:84:4d:70: 5c:ad:23:26:11:40:12:ca:1c:4c:04:31:8c:34:5c: 50:45:dc:a7:d5:39:01:cb:99:5b:f1:4f:18:e0:f6: d3:57:a4:a5:36:9b:02:86:44:78:b2:d3:6c:22:48: e5:f6:17:72:9b:3a:7a:d9:49:8a:74:c7:a3:7a:f8: 03:09:8a:e9:9f:9a:b4:7e:0a:16:98:28:4c:87:61: b7:b0:96:14:ea:15:3a:f7:f5:70:ab:e9:72:4a:00: 83:be:b3:14:df:2f:fa:b3:43:17:53:d9:af:bc:3e: e4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:58:17:2F:97:04:90:61:8D:65:9B:73:75:AB:EF:58:00:51:96:4C X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5FgXL5cEkGGNZZtzdavvWABRlkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:800::/44 Signature Algorithm: sha256WithRSAEncryption 69:7c:78:6e:be:d6:a9:92:0c:bf:13:da:a1:99:27:7f:1d:12: 4d:9f:56:76:bb:1d:29:26:85:0f:6a:af:bc:92:fb:0c:69:69: 78:6f:88:ae:81:63:8f:e9:7a:bb:3e:99:5c:7f:3a:d4:03:4c: f9:8c:97:97:b0:01:f6:54:54:2a:d4:cf:a9:2e:8d:a8:c7:38: 2c:bf:5a:10:1c:65:58:2c:4e:05:f0:b1:db:5d:41:ef:0e:7d: 68:b1:e0:6b:e9:80:e4:46:59:88:b7:ba:8b:df:e8:ac:09:39: a1:59:96:9b:72:7b:bb:c4:c8:f5:55:19:6b:81:91:b0:ee:6e: cc:c4:94:20:07:62:92:3d:80:1d:d1:38:7a:f0:9d:41:4f:ae: 43:97:29:3e:f2:99:26:c7:d0:50:a1:9b:bf:42:7d:7c:6c:2d: fa:d1:6c:31:df:60:d0:af:9a:57:74:c7:33:c2:49:01:f3:25: 1f:b8:71:3a:a7:c0:17:4b:50:4a:a1:b3:5a:58:35:58:5a:3b: a7:2d:78:2b:ae:bf:03:a1:e5:da:61:cc:a5:6d:13:db:82:01: 8b:95:e4:3d:cc:e6:0a:85:b7:4a:8e:42:99:70:1b:c2:de:78: ac:f0:87:9c:e3:03:6c:81:9c:42:dc:c1:50:b1:da:a7:a1:22: 07:21:1f:93 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OTX0o10dgxS6tMerX25vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDU4MTcyZjk3MDQ5MDYxOGQ2NTliNzM3NWFiZWY1ODAwNTE5NjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL7K1hArQhVI3/NOSwvI9xpohBWy U5EE16LPOilr6qxVWROrePQHKihBcUgE+ydGquRfiR9WJ8/vutX0Z3XJKSDeqkmz 3k1f5JB/NNw24rY5yjkJVO9I73IQdIuiGZ74IWeHcyNjPO/0+6pIysNHwzshURwQ x8nYkEooz3ZOFdUnHWyjOla6TeGPnJHNoC/n16KETXBcrSMmEUASyhxMBDGMNFxQ Rdyn1TkBy5lb8U8Y4PbTV6SlNpsChkR4stNsIkjl9hdymzp62UmKdMejevgDCYrp n5q0fgoWmChMh2G3sJYU6hU69/Vwq+lySgCDvrMU3y/6s0MXU9mvvD7kFQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFORYFy+XBJBhjWWbc3Wr71gAUZZMMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvNUZnWEw1Y0VrR0dOWlp0emRhdnZXQUJSbGt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQgA MA0GCSqGSIb3DQEBCwUAA4IBAQBpfHhuvtapkgy/E9qhmSd/HRJNn1Z2ux0pJoUP aq+8kvsMaWl4b4iugWOP6Xq7PplcfzrUA0z5jJeXsAH2VFQq1M+pLo2oxzgsv1oQ HGVYLE4F8LHbXUHvDn1oseBr6YDkRlmIt7qL3+isCTmhWZabcnu7xMj1VRlrgZGw 7m7MxJQgB2KSPYAd0Th68J1BT65Dlyk+8pkmx9BQoZu/Qn18bC360Wwx32DQr5pX dMczwkkB8yUfuHE6p8AXS1BKobNaWDVYWjunLXgrrr8DoeXaYcylbRPbggGLleQ9 zOYKhbdKjkKZcBvC3nis8Iec4wNsgZxC3MFQsdqnoSIHIR+T -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:55 2026 by rpki-client